Description

Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors.

Remediation

References

CVE-2014-2047

Related Vulnerabilities

Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-64646)

Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-41284)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43732)

WordPress Plugin Follow Me Cross-Site Request Forgery (3.1.1)

Drupal Improper Input Validation Vulnerability (CVE-2014-5019)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-287 CVE-2014-2047